Info Security Advisor - Mid Level

$99,160 - $189,530/Yr

USAA - San Antonio, TX

Full-time - Mid Level

San Antonio, TX

Credit Intermediation and Related Activities

About the position

As an Info Security Advisor - Mid Level at USAA, you will play a crucial role in the Workforce Identity and Access Management (IAM) Application Onboarding Team. Your primary responsibility will be to analyze applications' IAM architecture and ensure compliance with enterprise IAM platforms and processes. You will provide technical consultation and guidance on information security risks, helping to identify and manage existing and emerging risks while educating risk owners on security requirements and best practices. This position requires a commitment to enhancing information security governance and risk management strategies across the organization.

Responsibilities

• Creates and contributes to Information Security governance.
• Publishes, maintains, and interprets moderately complex Information Security governance requirements (e.g. policies and standards).
• Implements repeatable methods and measurements to resolve Information Security risk and recommends improvements to the process.
• Performs security risk assessments of moderately complex projects, new technologies, business partners, and third parties.
• Consults with individuals and teams on Information Security risk; guides the security direction of USAA technical projects and initiatives.
• Recommends risk treatment options for technical projects and initiatives.
• Responds to routine inquiries and periodic exams from internal control partners (e.g. legal, compliance, audit, risk).
• Guides and assists process owners in the identification, development, and testing of Information Security controls for risk mitigation effectiveness.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled.

Requirements

• Bachelor's degree; OR 4 years of related experience may be substituted in lieu of degree.
• 4 years of work experience in one or more of the eight areas: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and/or Software Development Security.
• 2 years of related experience in conducting risk assessments, recommending risk treatment options and/or developing program governance (e.g. policies and standards).
• Proficient level of business insight in business operations, risk management, industry practices and emerging trends.
• Solid grasp of security protocols, application security, cryptography, authentication, authorization, and security.
• Knowledge of applicable information security frameworks, standards, regulatory requirements, and controls.
• Knowledge and application of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application, and networking environments.

Nice-to-haves

• Experience in Identity and Access Management capabilities including Authentication methods and tools, Access Reviews, Role Based Access Frameworks, User Provisioning, Privileged Access Management.
• Experience with IAM Risks and Controls.
• Excellent written and verbal communication skills.
• Demonstrate initiatives and ability to coordinate across functional lines.

Benefits

• Comprehensive medical, dental and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays plus 16 paid volunteer hours
• Various wellness programs
• Career path planning and continuing education assistance.